brightery / framework
Cache-first, SEO-first, AI-native PHP application framework.
v1.0.1
2026-08-05 15:46 UTC
Requires
- php: ^8.4
- ext-json: *
- ext-openssl: *
- ext-pdo: *
- psr/container: ^2.0
- psr/event-dispatcher: ^1.0
- psr/http-factory: ^1.1
- psr/http-message: ^2.0
- psr/http-server-handler: ^1.0
- psr/http-server-middleware: ^1.0
- psr/log: ^3.0
- psr/simple-cache: ^3.0
Requires (Dev)
- phpstan/phpstan: ^2.2
- squizlabs/php_codesniffer: ^3.13
Suggests
- ext-opcache: Recommended for production performance.
- ext-pdo_mysql: Required for MySQL applications and database queues.
- ext-redis: Recommended for distributed cache, sessions, queues, and scheduler locks.
- ext-xml: Recommended for advanced XML integrations.
- ext-zip: Required to install signed module ZIP archives directly.
README
Brightery is a cache-first, SEO-first, AI-native PHP application framework built for explicit, compiled, inspectable applications rather than runtime magic.
Install
composer require brightery/framework "^1.0"
For a complete application:
composer create-project brightery/app my-project "^1.0"
Stable 1.x contract
Stable classes registered in an application's api-surface.php are covered by the 1.x backward-compatibility policy. Public parameter names are included because PHP named arguments make renaming a parameter a source-breaking change.
php vendor/bin/brightery api:snapshot storage/release/api-surface.json php vendor/bin/brightery api:check previous-api-surface.json php vendor/bin/brightery support:policy --json
Production workflow
php vendor/bin/brightery app:install php vendor/bin/brightery optimize php vendor/bin/brightery runtime:soak --iterations=5000 --json php vendor/bin/brightery release:check --production --json
Design principles
- PHP 8.4 minimum with strict types;
- manual routes and constructor injection;
- deterministic production compilation;
- request scopes for persistent workers;
- secure defaults and fail-closed optional integrations;
- JSON table schemas and explicit data tasks;
- provider-neutral queues, storage, mail, notifications, realtime, and telemetry;
- AI output treated as untrusted structured input;
- no controller scanning, automatic endpoint exposure, or request-specific static state.
Review the stable release notes, support policy, security policy, architecture, and upgrade guide before production deployment.